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DETAILED ACTION 

This action is in response to the papers filed 5/28/2007. No amendments for the claims 
were filed. Currently claims 1-20 are under consideration. 

Response to Arguments 

Applicant's arguments with respect to 35 U.S.C 101 have been fully considered and are 
not persuasive. The replacement paragraph still includes content downloaded from a secure 
network connection. Examiner suggest amending the claim to read "a storage medium encoding 
a computer program for executing on a computer system a computer process". Since in the 
specification on old paragraph 0006 teaches that there is a difference between computer program 
product and computer program storage medium. A computer program product includes computer 
program storage medium and content downloaded from a secure network connection. While 
computer program storage medium includes only a storage medium storing a computer program. 

Applicant's arguments with respect to prior art have been fully considered and are moot 
in view of new grounds of rejections. 

Claim Rejections - 35 USC §101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

Claims 6-10 are rejected under 35 U.S.C. 101 because the claim invention is directed to 
non-statutory subject matter. The "computer program product," may be " a computer data signal 
embodied in a carrier wave by a computing system and encoding the computer program to 
establish a secure connection" according to the old paragraph 0006 of the specification and the 
"computer program product," may be " a computer product may be provided by encoding the 
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computer program to establish a secure connection" according to the new paragraph 0006 of the 
specification. This subject matter is not limited to a process, machine, manufacture, or a 
composition of matter. Instead, it includes a form of energy. Energy does not fall within a 
statutory category since it is clearly not a series of steps or acts to constitute a process, not a 
mechanical device or combination of mechanical devices to constitute a machine, not a tangible 
physical article or object which is some form of matter to be a product and constitute a 
manufacture, and not a composition of two or more substances to constitute a composition of 
matter. Note for further clarification of the claims please refer to MPEP 2163.07. 

Claim Rejections '35 use §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date ot application for patent in the United States. 

Claim 1-15 are rejected under 35 U.S.C. 102(b) as being anticipated by Alegre et al (U.S. 
Patent 6,1 99,1 1 3), Alegre teaches with respect to claims 1 and 6, a method comprising: providing a 
network address (see column 4 lines 32-67 i.e. Web host 210 also sends trusted network access 
presentation information to client browser 110, and The user selects an access request from the 
trusted network access presentation information to access trusted network 138. Client browser 110 
sends the request, for example a URL associated with the selection) for a system host (see figure 2 
trusted network) to a remote client (see figure 2 element 1 10) if security credentials for the remote 
client satisfy at least one condition for accessing the system host (see column 4 lines 32-67); and 
verifying the remote client is authorized to access the system host in response to a request from the 
system host to verify the remote client (see column 4 lines 55-67). 
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With respect to claims 2 and 7, granting the remote chent a security key with the network 
address (see column 4 lines 32-47 i.e. session key); and evaluating the security key when it is 
received from the system host to verify that the remote client is authorized to access the system host 
(see column 4 lines 32-67). 

With respect to claims 3 and 8, requiring the remote client present the system host with a 
valid security key to verify that the remote client is authorized to access the system host (see column 
4 lines 32-67), 

With respect to claims 4 and 9, requiring the remote client timely present the system host 
with a security key to verify that the remote client is authorized to access the system host (see 
column 4 lines 32-42 i.e. Key server 234 creates a unique and unpredictable session key, and stores 
the session key, the UID, the PWD, and key expiration criteria in key database 236). 

Wilh respect to claims 5 and 10, receiving the network address from the system host (see 
figure 2 element 210 web host and (see column 4 lines 32-67 i.e. Web host 210 also sends trusted 
network access presentation information to client browser 110, and The user selects an access request 
from the trusted network access presentation information to access trusted network 138. Client 
browser 110 sends the request, for example a URL associated with the selection). 

With respect to claims 1 1, a system comprising: an authorization module receiving a request 
from a remote client to access a system host (see column 4 Hnes 17-24 i.e. When the user wants to 
access trusted network 138, the user sends a request from client browser 1 10, over Internet 1 14 and 
DMZ network 122, to web host 210), the authorization module providing the remote client with a 
network address of the system host (see column 4 lines 32-67 i.e. Web host 210 also sends trusted 
network acces,s presentation information to client browser 110, and The user selects an access request 
from the trusted network access presentation information to access trusted network 138. Client 
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browser 110 sends the request, for example a URL associated with the selection) if the remote client 
is authorized to access the system host (see column 4 lines 32-67); a verification module receiving a 
request from the system host to verify that the remote client is authorized to access the system host 
before granting the remote client access to the system host (see column 4 lines 32-67). 

With respect to claims 12, a security key provided to the remote client if the remote client is 
authorized to access the system host (see colunm 4 lines 32-67 i.e. session key). 

With respect to claims 13, a security key provided to the remote client for presentation to the 
system host to verify that the remote client is authorized to access the system host (see column 4 
lines 32-67 i.e. session key). 

With respect to claims 14, a security key provided to the remote client for timely presentation 
to the system host to verify that the remote client is authorized to access the system host (see column 
4 Unes 32-42 i.e. Key server 234 creates a unique and unpredictable session key, and stores the 
session key, the UID, the PWD, and key expiration criteria in key database 236). 

With respect to claims 1 5, an address database having the network address of the system host 
(see column 4 lines 32-67 i.e. Web host 210 also sends trusted network access presentation 
information to client browser 110, and The user selects an access request from the trusted network 
access presentation information to access trusted network 138. Client browser 110 sends the request, 
for example a URL associated with the selection). 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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Claim 16-20 rejected under 35 U.S.C. 103(a) as being unpatentable over Alegre et al (U.S. 
Patent 6,199,1 13) in view of Hull (U.S. Patent # 6,487,457). Alegre teaches everything with respect 
to claim 1 1 above but with respect to claim 1 6 he does not teach a configuration module for 
accessing a building automation system via the system host if the remote client is granted access to 
the system host. Hull teaches teach a configuration module for accessing a building automation 
system via the system host if the remote client is granted access to the system host (see Hull column 
5 line 31-40 and column 6 lines 14-22). It would have been obvious at the time the invention was 
made to a person having ordinary skill in the art to which said subject matter pertains to have a 
remote client be able to connect to building automation system to monitor real time pricing and 
change the furnace thermostat, and AC, to allow the building to take advantage of the best utility 
rates (see hull column 5 line 27-59 and column 6 line 57 - column 7 line 7), Therefore one would 
have been motivated to have included a configuration module for accessing a building automation 
system via the system host if the remote client is granted access to the system host. 

With respect to claims 17, Hull teaches wherein the configuration module is provided at the 
remote client (see Hull column 6 line 57 - colxjmn 7 line 7). It would have been obvious at the time 
the invention was made to a person having ordinary skill in the art to which said subject matter 
pertains to have a remote client be able to connect to building automation system to monitor real time 
pricing and change the furnace thermostat, and AC, to allow the building to take advantage of the 
best utility rates by having the remote client have a user interface application for assessing the server 
and monitoring and controlling the building subsystems (see hull column 5 line 27-59 and column 6 
line 57 - column 7 Hne 7). Therefore one would have been motivated to have included a 
configuration module for accessing a building automation system via the system host if the remote 
client is granted access to the system host. 
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With respect to claims 18, wherein the configuration module is provided at a security host 
(see Hull abstract) It would have been obvious at the time Ihe invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have a server be able to monitor real 
time pricing and change the fumace thermostat, and AC, to allow the building to take advantage of 
the best utility rates (see hull column 5 line 27-59 and column 6 line 57 - column 7 line 7). Therefore 
one would have been motivated to have included a configuration module for accessing a building 
automation system via the system host if the remote client is granted access to the system host. 

With respect to claims 19, \\4ierein the configuration module is provided for the remote client 
via a security host (see Hull column 6 line 57 - column 7 line 7). It would have been obvious at the 
time die invention was made to a person having ordinary skill in the art to which said subject matter 
pertains to have a remote client be able to connect to building automation system to monitor real time 
pricing and change the fumace thermostat, and AC, to allow the building to take advantage of the 
best utility rates by having the remote client have a user interface application for assessing the server 
and monitoring and controUing the building subsystems (see hull column 5 line 27-59 and column 6 
line 57 - column 7 line 7). Therefore one would have been motivated to have included a 
configuration module for accessing a building automation system via the system host if the remote 
cUent is granted access to the system host. 

With respect to claims 20, wherein the configuration module is provided for the remote client 
as a web application (see Hull abstract and column 6 line 57 - column 7 line 7). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have a remote client be able to connect to building automation system to 
monitor real time pricing and change the fumace thermostat, and AC, to allow the building to take 
advantage of the best utility rates by having the remote client have a browser application for 
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assessing the server and monitoring and controlling the building subsystems (see hull column 5 line 
27-59 and column 6 line 57 - column 7 line 7). Therefore one would have been motivated to have 
included a configuration module for accessing a building automation system via the system host if 
the remote chent is granted access to the system host. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270-1018. 
The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 5:00 P.M. 
The examiner can also be reached on alternate Fridays from 7:30 A.M. to 4:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner*s supervisor, 
Gilberto Barron, can be reached on 571-272-3799. The fax phone number for the prgariization where 
this apphcation or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications may 
be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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